1 files changed, 25 insertions, 0 deletions
diff --git a/js/src/jit-test/tests/debug/onExceptionUnwind-15.js b/js/src/jit-test/tests/debug/onExceptionUnwind-15.js
new file mode 100644
index 000000000..0c6f46f23
--- /dev/null
+++ b/js/src/jit-test/tests/debug/onExceptionUnwind-15.js
@@ -0,0 +1,25 @@
+// Test that Ion->Baseline in-place debug mode bailout can recover the iterator
+// from the snapshot in a for-of loop.
+
+g = newGlobal();
+g.parent = this;
+g.eval("Debugger(parent).onExceptionUnwind=(function() {})");
+function throwInNext() {
+  yield 1;
+  yield 2;
+  yield 3;
+  throw 42;
+}
+
+function f() {
+  for (var o of new throwInNext);
+}
+
+var log = "";
+try {
+  f();
+} catch (e) {
+  log += e;
+}
+
+assertEq(log, "42");